https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:06:54.948682+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:18160 ALSA-2026:18160 — Moderate: libssh security update 2026-10-03T15:06:55.350615+00:00

Affected: AlmaLinux:10: libssh, AlmaLinux:10: libssh-config, AlmaLinux:10: libssh-devel

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

* libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966) * libssh: Improper sanitation of paths received from SCP servers (CVE-2026-0964) * libssh: libssh: Denial of Service via improper configuration file handling (CVE-2026-0965) * libssh: libssh: Denial of Service via inefficient regular expression processing (CVE-2026-0967) * libssh: libssh: Denial of Service due to malformed SFTP message (CVE-2026-0968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-05141 bdu:2026-05141 2026-10-03T15:06:55.350691+00:00 bdu:2026-05141 https://cve.radiocsirt.org/vuln/bell-cve-2026-0964 BELL-CVE-2026-0964 2026-10-03T15:06:55.350709+00:00

Affected: Alpaquita:23: libssh, Alpaquita:25: libssh, Alpaquita:stream: libssh

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0209 certfr-2026-avi-0209 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T15:06:55.350730+00:00 certfr-2026-avi-0209 https://cve.radiocsirt.org/vuln/euvd-2026-362237 EUVD-2026-362237 2026-10-03T15:06:55.350745+00:00 EUVD-2026-362237 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0964 fkie_cve-2026-0964 2026-10-03T15:06:55.350756+00:00

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences.

This is the same issue as in OpenSSH, tracked as CVE-2019-6111.

 https://cve.radiocsirt.org/vuln/ghsa-9p3w-rm2q-9gxc GHSA-9p3w-rm2q-9gxc 2026-10-03T15:06:55.350779+00:00

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences.

This is the same issue as in OpenSSH, tracked as CVE-2019-6111.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-0964 msrc_CVE-2026-0964 — Libssh: improper sanitation of paths received from scp servers 2026-10-03T15:06:55.350794+00:00 msrc_CVE-2026-0964 https://cve.radiocsirt.org/vuln/oesa-2026-1492 OESA-2026-1492 — libssh security update 2026-10-03T15:06:55.350810+00:00

Affected: openEuler:24.03-LTS: libssh

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl). Security Fix(es):

(CVE-2026-0964)

(CVE-2026-0967)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10203-1 openSUSE-SU-2026:10203-1 — libssh-config-0.11.4-1.1 on GA media 2026-10-03T15:06:55.350832+00:00

libssh-config-0.11.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:0567-1 SUSE-SU-2026:0567-1 — Security update for libssh 2026-10-03T15:06:55.350849+00:00

Security update for libssh

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-0964 UBUNTU-CVE-2026-0964 2026-10-03T15:06:55.350865+00:00

Affected: Ubuntu:Pro:16.04:LTS: libssh, Ubuntu:Pro:18.04:LTS: libssh, Ubuntu:Pro:20.04:LTS: libssh, Ubuntu:22.04:LTS: libssh, Ubuntu:24.04:LTS: libssh, Ubuntu:25.10: libssh

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences. This is the same issue as in OpenSSH, tracked as CVE-2019-6111.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0446 WID-SEC-W-2026-0446 — libssh: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und DoS 2026-10-03T15:06:55.350889+00:00

Ein Angreifer kann mehrere Schwachstellen in libssh ausnutzen, um Dateien zu manipulieren oder um einen Denial-of-Service-Zustand zu verursachen.